This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json) Hash identifier: 3Ps2pqE2phoD2KsrEp7aD8kgTrNQiQTLjwc22D6hmfE= Subject key identifier: 43:DA:3C:E4:83:B3:4B:E3:B2:44:5E:C1:CD:C7:1E:99:F0:CC:AA:DC Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Certificate serial: 019BAEA5DA7946B781A9DF20AEBCF41DED56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft Manifest number: 17C7 Signing time: Sun 11 Jan 2026 20:01:03 +0000 Manifest this update: Sun 11 Jan 2026 20:01:03 +0000 Manifest next update: Mon 12 Jan 2026 20:01:03 +0000 Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: XHOTN/Cht86dYumWcPOnTzE7pI8SCt4aX8rVHy+sXd4=) 2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:a5:da:79:46:b7:81:a9:df:20:ae:bc:f4:1d:ed:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Validity Not Before: Jan 11 20:01:03 2026 GMT Not After : Jan 12 20:01:03 2026 GMT Subject: CN=43da3ce483b34be3b2445ec1cdc71e99f0ccaadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:03:f3:ef:08:9c:1b:28:1c:6c:0b:7b:ba:9b: da:55:d8:77:9e:89:cf:f2:ea:66:7a:ce:df:6d:c9: 4d:09:54:50:37:80:78:08:65:22:9e:71:69:1d:99: e6:35:bc:46:d6:ba:7b:25:8c:a2:2a:bb:66:90:7f: 50:eb:27:f4:02:1b:20:6f:92:b3:05:88:52:41:f8: c3:f1:65:c0:44:27:e0:22:c2:20:94:b5:53:95:f7: f5:23:26:ee:7e:1f:a0:15:d3:eb:f1:86:1c:6d:f5: 23:99:a2:1c:8e:af:de:f7:46:9f:14:86:e4:49:8f: f2:e9:95:92:de:86:ff:da:b8:11:06:4b:03:38:36: 1b:db:a8:98:8b:09:01:b5:96:69:6a:de:2f:32:3d: 1f:02:3b:54:6e:d0:e9:66:a6:96:b7:a0:a5:36:92: 05:8d:69:bf:99:1f:07:ef:cc:12:b0:4b:81:79:29: 99:81:f9:b7:ad:75:1f:ed:d1:1f:e0:36:e0:7a:cd: ef:70:b8:61:13:f8:1d:ed:e5:e1:e9:01:f4:34:27: a1:6b:2b:4a:a7:f8:07:1f:9c:9a:79:3c:b8:87:01: 6b:c1:f4:13:6e:3c:53:e1:ac:1d:2a:41:42:cd:5a: 16:89:1e:bc:9b:fb:56:6f:66:48:19:08:35:d0:82: 1f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DA:3C:E4:83:B3:4B:E3:B2:44:5E:C1:CD:C7:1E:99:F0:CC:AA:DC X509v3 Authority Key Identifier: keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2f:a7:2f:ae:06:da:55:27:0a:53:ea:0b:79:66:3d:c2:96: c8:31:c5:95:ea:71:d6:87:90:35:fe:ce:e7:d6:12:11:30:56: c1:a1:a7:96:9d:fb:28:47:ab:79:56:9e:38:c2:3a:7f:aa:fc: ab:81:fe:54:1c:19:ff:6e:3f:16:d5:da:40:93:36:df:e7:a2: 55:5d:d2:df:4a:3c:13:f1:30:8f:aa:c8:74:4c:c2:a0:94:6e: b1:c0:29:95:20:bb:c9:52:ef:4a:8e:fd:9a:42:5b:01:f8:e1: 36:a3:bc:93:67:75:70:88:ae:25:5e:e9:e0:63:9f:2f:da:b9: d6:ca:ef:ec:3f:d8:fc:68:ca:ef:56:a3:1f:c8:94:0a:83:e5: 0f:55:76:2e:38:af:91:32:d8:e9:0c:ad:9c:c8:e5:c2:23:7e: 3a:a8:06:4d:61:cb:c8:6c:ef:a0:07:b7:ca:4d:6b:e5:87:bd: d2:11:3f:92:e9:79:3e:2d:74:b2:9b:ad:7d:a6:2f:02:a6:a0: 16:24:9b:1e:71:e9:fb:3f:e1:45:37:2f:b7:ea:68:0a:f1:89: f7:c5:fb:9a:2d:7c:69:7c:bb:1e:1f:17:a0:1f:99:a2:2a:c4: a4:a5:fc:ef:6f:89:bc:c4:b5:48:16:ec:11:eb:df:86:b8:cd: 18:7a:52:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuupdp5RreBqd8grrz0He1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz NDJkNjQwHhcNMjYwMTExMjAwMTAzWhcNMjYwMTEyMjAwMTAzWjAzMTEwLwYDVQQD Eyg0M2RhM2NlNDgzYjM0YmUzYjI0NDVlYzFjZGM3MWU5OWYwY2NhYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgPz7wicGygcbAt7upvaVdh3nonP 8upmes7fbclNCVRQN4B4CGUinnFpHZnmNbxG1rp7JYyiKrtmkH9Q6yf0Ahsgb5Kz BYhSQfjD8WXARCfgIsIglLVTlff1Iybufh+gFdPr8YYcbfUjmaIcjq/e90afFIbk SY/y6ZWS3ob/2rgRBksDODYb26iYiwkBtZZpat4vMj0fAjtUbtDpZqaWt6ClNpIF jWm/mR8H78wSsEuBeSmZgfm3rXUf7dEf4Dbges3vcLhhE/gd7eXh6QH0NCehaytK p/gHH5yaeTy4hwFrwfQTbjxT4awdKkFCzVoWiR68m/tWb2ZIGQg10IIfjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPaPOSDs0vjskRewc3HHpnwzKrcMB8GA1UdIwQY MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt MjYyYmVjNzE3YjE3LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3 LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAri+nL64G 2lUnClPqC3lmPcKWyDHFlepx1oeQNf7O59YSETBWwaGnlp37KEereVaeOMI6f6r8 q4H+VBwZ/24/FtXaQJM23+eiVV3S30o8E/Ewj6rIdEzCoJRuscAplSC7yVLvSo79 mkJbAfjhNqO8k2d1cIiuJV7p4GOfL9q51srv7D/Y/GjK71ajH8iUCoPlD1V2Ljiv kTLY6QytnMjlwiN+OqgGTWHLyGzvoAe3yk1r5Ye90hE/kul5Pi10sputfaYvAqag FiSbHnHp+z/hRTcvt+poCvGJ98X7mi18aXy7Hh8XoB+ZoirEpKX872+JvMS1SBbs EevfhrjNGHpSVQ== -----END CERTIFICATE-----Generated at Sun Jan 11 22:32:12 2026 by rpki-client